Metasploit for Beginners

Key Features

Carry out penetration testing in highly-secured environments with Metasploit
Learn to bypass different defenses to gain access into different systems.
A step-by-step guide that will quickly enhance your penetration testing skills.

Book Description

This book will begin by introducing you to Metasploit and its functionality. Next, you will learn how to set up and configure Metasploit on various platforms to create a virtual test environment. You will also get your hands on various tools and components used by Metasploit.

Further on in the book, you will learn how to find weaknesses in the target system and hunt for vulnerabilities using Metasploit and its supporting tools. Next, you'll get hands-on experience carrying out client-side attacks. Moving on, you'll learn about web application security scanning and bypassing anti-virus and clearing traces on the target system post compromise. This book will also keep you updated with the latest security techniques and methods that can be directly applied to scan, test, hack, and secure networks and systems with Metasploit.

By the end of this book, you'll get the hang of bypassing different defenses, after which you'll learn how hackers use the network to gain access into different systems.

What you will learn

Get to know the absolute basics of the Metasploit framework so you have a strong foundation for advanced attacks
Integrate and use various supporting tools to make Metasploit even more powerful and precise
Set up the Metasploit environment along with your own virtual testing lab
Use Metasploit for information gathering and enumeration before planning the blueprint for the attack on the target system
Get your hands dirty by firing up Metasploit in your own virtual lab and hunt down real vulnerabilities
Discover the clever features of the Metasploit framework for launching sophisticated and deceptive client-side attacks that bypass the perimeter security
Leverage Metasploit capabilities to perform Web application security scanning

About the Author

Sagar Rahalkar is a seasoned information security professional having more than 10 years of comprehensive experience in various verticals of IS. His domain expertise is mainly into breach detection, cyber crime investigations, digital forensics, application security, vulnerability assessment and penetration testing, compliance for mandates and regulations, IT GRC, and much more. He holds a master's degree in computer science and several industry-recognized certifications such as Certified Cyber Crime Investigator, Certified Ethical Hacker, Certified Security Analyst, ISO 27001 Lead Auditor, IBM certified Specialist-Rational AppScan, Certified Information Security Manager (CISM), and PRINCE2. He has been closely associated with Indian law enforcement agencies for more than 3 years dealing with digital crime investigations and related training and received several awards and appreciations from senior officials of the police and defense organizations in India. Sagar has also been a reviewer and author for various books and online publications.

Table of Contents

Introduction to Metasploit & Supporting Tools
Setting up your environment
Metasploit Components and Environment Configuration
Information Gathering with Metasploit
Vulnerability hunting with Metasploit
Client Side attacks with Metasploit
Web Application Scanning with Metasploit
Anti-Virus Evasion and Anti-Forensics
Cyber Attack Management using Armitage
Extending Metasploit & Exploit Development